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DETAILED ACTION 

1. This action is in response of the original filing of March 15, 2004. Claims 1-19 
are pending and have been considered below. 

Claim Objections 

2. Claims 4, 1 1 are objected to because of the following informalities: claim 4 reads 
the limitation of "save" and claim 1 1 reads the limitation of "unsymmetrical " which are 
believe to be grammatical errors, the examiner interpreted them respectively as 
"same", "asymmetric". Appropriate correction is required. 

Claim Rejections -35 USC §102 

5. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

Claims 1,9, 10, 17 are rejected under 35 U.S.C. 102(b) as being anticipated by Gillev 
et al (US 5771287). 

Claim 1 : Gillev et al discloses an apparatus for controlling the feature set of a 

programmable device comprising: 

A plurality of modules including a microprocessor and at least one storage 
module for storing code and data for the microprocessor, at least one of 
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the modules storing a serial number of the at least one module in a non- 
exchangeable manner (a database which is correlates and stores a set of 
programmable device serial number) (column 4, lines 34-36); 

An arrangement for storing a code number, the code number being 
obtained from the serial number by using an encryption method, and for 
storing information required to calculate the serial number form the code 
number (each programmable device, uniquely identified by a serial 
number, has a secure memory location to store the secret key associated 
with it serial number. Both the programming device and each 
programmable device include memory with a program that uses a secure 
cryptographic method to calculate authentication codes) (column 4, lines 
36-49), 

Wherein the microprocessor is adapted to calculate a serial number from 
the code number on the basis of the information to compare the calculated 
serial number to the stored serial number, and to execute or not execute 
at least part of the code as a function of a result of the comparison (This 
present authentication code is then compared by the programmable 
device to the factory calculated and set authentication code that was 
originally stored in the programmable device memory. If the two 
authentication codes match, the programmable device will authorize to 
function with the present feature set by the present operation mode code. 
If they do not match, the programmable takes a number of different 
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actions, including refusing to conduct certain functions, refusing to operate 
at all, or defaulting to a lower feature set) (column 4, lines 22-34). 

Claim 9: Gillev et al discloses an apparatus for controlling the feature set of a 
programmable device and preventing tampering with memory in electronic device 
as in claim 1 above, and Gillev et al further discloses that at least two of the 
modules are each identified by a serial number and the code number is obtained 
by joint encryption of the serial numbers (Both the EEPROM and ROM contain 
serial number SN) (column 6, lines 30-60, figure 1). 

Claim 10: Gillev et al discloses a method for controlling the feature set of a 
programmable device comprising: 

Storing, in the microprocessor system, a code number, which is obtained 
from the serial number by using an encryption method, and storing 
information required for calculating the serial number from the code 
number (each programmable device, uniquely identified by a serial 
number, has a secure memory location to store the secret key associated 
with it serial number. Both the programming device and each 
programmable device include memory with a program that uses a secure 
cryptographic method to calculate authentication codes) (column 4, lines 
36-49); 

Reading the code number and calculating an unencrypted serial number 
from the code number with the aid of the information (the authentication 
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code is calculated using the operation mode code and the secret key 
together with a cryptographic methodology. This authentication code is 
then also programmed in a programmable device's memory. It does not 
have to be secured) (column 4, lines 12-6); 

Comparing the decrypted serial number thus obtained with the serial 
number of the module (This present authentication code is then compared 
by the programmable device to the factory calculated and set 
authentication code that was originally stored in the programmable device 
memory) (column 4, lines 22-30); 

And detecting an exchange of the module if the serial number of the 
module does not match the decrypted serial number (If the two 
authentication codes match, the programmable device will authorize to 
function with the present feature set by the present operation mode code. 
If they do not match, the programmable takes a number of different 
actions, including refusing to conduct certain functions, refusing to operate 
at all, or defaulting to a lower feature set) (column 4, lines 26-34). 

Claim 17: Gillev et al discloses a method for controlling the feature set of a 
programmable device and preventing tampering with memory in electronic device 
as in claim 10 above, and Gillev et al further discloses that the method is used 
for a plurality of modules of the microprocessor system and the code number is 
obtained by a joint encryption of serial numbers of the plurality of modules the 
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module includes a microprocessor of the microprocessor system (a secure 
encryption algorithm is used with the operation mode code and the secret key to 
create the authentication code) ( column 5, lines 66-67 and column 6 lines 1-5). 



Claim Rejections - 35 USC § 103 

1 . The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 



2. Claims 2-8, 11-16, 18, 19 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Gilley et al (US5771287) in view of Osborn (US 6026293). 

Claims 2, 1 1 : Gillev et al discloses a apparatus and method for controlling the 
feature set of a programmable device as in claims 1 and 10 above, but does not 
disclose that a asymmetric encryption method is used. However, Osborn 
discloses an apparatus for preventing tampering with memory in electronic 
device, which further discloses an asymmetric authentication (data transfer 
device authentication involves the use of a public/private key authentication 
scheme) (column 6, lines 50-53). Therefore, it would have been obvious to one 
having ordinary skill in the art at the time the invention was made to add 
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asymmetric encryption in Gillev et al . One would have been motivate to do so in 
order to maintain system security. 

Claims 3, 12: Gillev et al and Osborn disclose an apparatus and method for 
controlling the feature set of a programmable device and preventing tampering 
with memory in electronic device as in claims 2 and 10 above, and Gillev et al 
further discloses that one of the at least one module identified by the serial 
number is a storage module (figure 1). 

Claims 4, 13: Gillev et al and Osborn disclose an apparatus and method for 
controlling the feature set of a programmable device and preventing tampering 
with memory in electronic device as in claims 3 and 12 above, and Gillev et al 
further discloses that the code number is stored in a same storage module as the 
serial number (the read only memory contains the serial, the code to enable the 
scrambling function) (column 6, lines 53-57 and Figure 1). 

Claims 5, 14: Gillev et al and Osborn disclose an apparatus and method for 
controlling the feature set of a programmable device and preventing tampering 
with memory in electronic device as in claims 3 and 12 above, and Gillev et al 
further discloses that the storage module is an electrically rewritable, non-volatile 
memory (scrambler also utilizes an electrically erasable programmable read only 
memory) (column 5, lines 31-3), and the code to be executed if the calculated 
and the stored serial numbers do not match includes a command for deletion of 
the storage module ( If the two authentication codes match, the programmable 
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device will authorize to function with the present feature set by the present 
operation mode code. If they do not match, the programmable takes a number of 
different actions, including refusing to conduct certain functions, refusing to 
operate at all, or defaulting to a lower feature set, other action are possible 
(deletion of storage module)) (column 4, lines 26-34). 

Claims 6, 15: Gillev et al discloses an apparatus and method for controlling the 
feature set of a programmable device and preventing tampering with memory in 
electronic device as in claims 1 and 10 above, but does not explicitly disclose 
that one of the at least one module identified by the serial number is the 
microprocessor. However, Osborn discloses an apparatus for preventing 
tampering with memory in electronic device, which further discloses a 
microprocessor as one of the module identified by the serial number (figure 4). 
Therefore, it would have been obvious to one having ordinary skill in the art at 
the time the invention was made to add the step of identifying the microprocessor 
by the serial number in Gillev et al . One would have been motivate to do so in 
order to maintain system security. 

Claims 7, 16: Gillev et al discloses an apparatus and method for controlling the 
feature set of a programmable device and preventing tampering with memory in 
electronic device as in claims 1 and 10 above, but does not explicitly disclose 
that the information required to calculate the serial number from the code number 
is stored in a different storage module than the code number. However, Osborn 
discloses an apparatus for preventing tampering with memory in electronic 
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device, which further discloses that the information required to calculate the 
serial number from the code number is stored in a different storage module than 
the code number (the Internal Read Only Memory IROM contains boot code, 
hashing code, authentication code and public encryption key, The Electronically 
Erasable Programmable Read Only Memory (EEPROM) includes user profile 
data, and Electronic Serial Number (ESN) ( column 7 line 67 and column 8, lines 
1-7). Therefore, it would have been obvious to one having ordinary skill in the art 
at the time the invention was made to add the step of storing the information 
required to calculate the serial in a different module in Gillev et al . One would 
have been motivate to do so in order to maintain system security. 

Claim 8: Gillev et al and Osborn disclose an apparatus for controlling the 
feature set of a programmable device and preventing tampering with memory in 
electronic device as in claim 7 above, and Gillev et al further discloses the 
different storage module is connected to the microprocessor in a non-separable 
manner (scramble includes a microprocessor, an electrically erasable 
programmable read only memory and a read only memory) (column 5, Iins29- 
35). 

Claim 18: Gillev et al discloses an method for controlling the feature set of a 
programmable device and preventing tampering with memory in electronic device 
as in claim 10 above, but does not explicitly disclose that steps of the method are 
executed upon each start-up of the microprocessor system. However, Osborn 
discloses an apparatus for preventing tampering with jriemoryJn electronic r . ^ ♦ 
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device, which further discloses that steps of the method are executed upon each 
start-up of the microprocessor system (A process for telephone power up and 
memory validation for the system depicted in Fig 4, according to an exemplary 
embodiment of the invention, is illustrated in Fig 5. After the cellular telephone is 
turned on, boot code within the Internal Read Only Memory (IROM) is executed 
by the microprocessor to initialize the controller. Has code containing in the 
IROM is then run to perform an audit hash value calculation over selected 
contents of the flash program and the Electronic Serial Number (ESN) value 
stored in EEPROM) (column 8, lines 19-30). Therefore, it would have been 
obvious to one having ordinary skill in the art at the time the invention was made 
to add the steps of execution of the method at feach start-up in Gillev et at . One 
would have been motivate to do so in order to maintain system security. 

Claim 19: Gillev et al discloses an method for controlling the feature set of a 
programmable device and preventing tampering with memory in electronic device 
as in claim 10 above but does not explicitly disclose that steps of the method are 
periodically executed during operation of the microprocessor system. However, 
Osborn discloses an apparatus for preventing tampering with memory in 
electronic device, which further discloses that steps of the method are 
periodically executed during operation of the microprocessor system (a periodic 
hash value calculation process is enabled, whereafter the cellular telephone 
begins normal operation) (column 8, lines 38-40). Therefore, it would have been 
obvious to one having ordinary skill in the art at the time the invention was made 
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to add the steps of a periodical execution of the method in Gillev et al . One 
would have been motivate to do so in order to maintain system security. 



Conclusion 

1 . The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

a. Lee et al (US 5774544) Method and apparatus for encrypting and 
decrypting microprocessor serial numbers. 

b. Smith (US 4731842) Security module for electronic funds transfer system. 

c. Leonardi (US 6556680) Method for authorization check. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Fatoumata Traore whose telephone number is (571) 
270-1685. The examiner can normally be reached Monday through Thursday from 7:30 
a.m. to 4:30 p.m. and every other Friday from 7:00 a.m. to 3:30 p.m. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Jim W. Myhre, can be reached on (571) 272 6722. The fax phone number 
for Formal or Official faxes to Technology Center 2100 is (571 ) 273-3800. Draft or 
Informal faxes, which will not be entered in the application, may be submitted directly to 
the examiner at (571) 274-1685. 
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Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the Group Receptionist whose telephone number is 
(571)272-2100. 



FT 

March 21, 2007 



Jatnesrw. Myhre 
SuD^ivisory Patent Examiner 



